Skip to content
Appaloosa Scout

Vulnerability · NVD

CVE-2019-1353

CRITICAL 9.8

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux (also known as "WSL") while accessing a working directory on a regular Windows drive, none of the NTFS protections were active.

Attack vector : Network No privileges required No user interaction
Show raw CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS 2.24% above median percentile 81.2%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Git Windows winget:Git.Git
    Affected ≥2.24.0 <2.24.1 Fixed in 2.24.1 Latest tracked 2.55.0.3 patched
Vulnerable CPE configurations (11)
Vendor Product Versions
git-scm git
All platforms (wildcard)
 ≥2.14.0 <2.14.6
git-scm git
All platforms (wildcard)
 ≥2.15.0 <2.15.4
git-scm git
All platforms (wildcard)
 ≥2.16.0 <2.16.6
git-scm git
All platforms (wildcard)
 ≥2.17.0 <2.17.3
git-scm git
All platforms (wildcard)
 ≥2.18.0 <2.18.2
git-scm git
All platforms (wildcard)
 ≥2.19.0 <2.19.3
git-scm git
All platforms (wildcard)
 ≥2.20.0 <2.20.2
git-scm git
All platforms (wildcard)
 ≥2.21.0 <2.21.1
git-scm git
All platforms (wildcard)
 ≥2.22.0 <2.22.2
git-scm git
All platforms (wildcard)
 ≥2.23.0 <2.23.1
git-scm git
All platforms (wildcard)
 ≥2.24.0 <2.24.1
View on NVD ↗